Hi,
I have this topology:
Zentyal distribution <-> gprs/umts router <-> notebook
Everything is connected via the ethernet cable. Zentyal has several local subnets. Everything is reachable without using OpenVPN.
If I enable OpenVPN (I'm using tap device - didn't find "tun" possibility in Zentyal distro. And on gprs router I'm using also "tap" with routing option) then I'm fully connected between Zentyal server and gprs router. From notebook I'm able to ping gprs router interfaces, but not further (except of one lan which isn't propagated through OpenVPN).
I'm asking - is it possilbe to somehow configure my notebook to be able to use the OpenVPN tunnel between Zentyal server and gprs router? Or do I have to use tun device (but that's probably not an option concerning Zentyal...)?
------
Several configurations:
Notebook (DHCP from gprs router IP 192.168.1.100)
$ route -n
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 eth0
192.168.1.0 0.0.0.0 255.255.255.0 U 1 0 0 eth0
GPRS router (DHCP for notebook 192.168.1.1 and 192.168.2.4 IP to Zentyal)
If I add OpenVPN it's through 10.10.36.0/24 network - IP 10.10.36.2
$ route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.20.0 10.10.36.1 255.255.255.0 UG 0 0 0 tap0
10.10.36.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 lan2
192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 lan1
192.168.30.0 10.10.36.1 255.255.255.0 UG 0 0 0 tap0
192.168.10.0 10.10.36.1 255.255.255.0 UG 0 0 0 tap0
0.0.0.0 192.168.2.2 0.0.0.0 UG 0 0 0 lan2
Zentyal server (192.168.2.2 is an IP to gprs router, local subnets are .10.0/24, .20.0/24, 30.0/24 - advertised by OpenVPN and .131.0/24 - not advertised. Local OpenVPN address is 10.10.36.1).
zentyal:~# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.168.131.0 0.0.0.0 255.255.255.0 U 0 0 0 eth4
10.10.36.0 0.0.0.0 255.255.255.0 U 0 0 0 tap0
192.168.20.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
192.168.30.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
192.168.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
ZENTYAL SERVER.CONF:
cat zentyal-server.conf
multihome
port 1194
proto udp
dev tap0
ca '/var/lib/zentyal/CA/cacert.pem'
cert '/var/lib/zentyal/CA/certs/55683B3468FDA767.pem'
key '/var/lib/zentyal/CA/private/vpn-zentyal-server.pem'
crl-verify /var/lib/zentyal/CA/crl/latest.pem
dh /etc/openvpn/ebox-dh1024.pem
server 10.10.36.0 255.255.255.0
ifconfig-pool-persist '/etc/openvpn/zentyal-server-ipp.txt'
client-to-client
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status '/var/log/openvpn/status-zentyal-server.log'
log-append '/var/log/openvpn/zentyal-server.log'
verb 3
push "route 192.168.10.0 255.255.255.0"
push "route 192.168.20.0 255.255.255.0"
push "route 192.168.30.0 255.255.255.0"
GPRS ROUTER CLIENT.CONF:
- nothing is really different but I can post it here if necessary. But OpenVPN tunnel is OK, only routes to notebook aren't...
ANY HELP WOULD BE APPRECIATED 🙂
